Public weekly trend triage from GitHub Trending and Hacker News. Public metadata only.
来自 GitHub Trending 和 Hacker News 的公开周度趋势初筛。仅使用公开元数据。
2026-W23 · 2026-05-26 to 2026-06-01 · sampled window: 2026-05-26..2026-06-01. Rolling seven-day ranking.
Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about. Works with Claude Code, Codex, Cursor, Copilot, Gemini CLI, and more.
利用AI大模型，一键生成高清短视频 Generate short videos with one click using AI LLM.
Pre-indexed code knowledge graph for Claude Code, Codex, Gemini, Cursor, OpenCode, AntiGravity, Kiro, and Hermes Agent — fewer tokens, fewer tool calls, 100% local
Learn it. Build it. Ship it for others.
Python tool for converting files and office documents to Markdown.
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Gemini CLI & Hermes Agent. Only official website: ccswitch.io
Open source repository of plugins primarily intended for knowledge workers to use in Claude Cowork
754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0
Public repository for Agent Skills
Academic Research Skills for Claude Code: research → write → review → revise → finalize
GitHub banned a security researcher after public Windows zero-day releases tied to a dispute with Microsoft. The story highlights the tension between vulnerability disclosure, platform enforcement, and the risk of further exploit dumps.
The article argues that MCP can consume too much context, behave unreliably, and overlap with existing CLI/API paths. It frames the critique around production experiments rather than treating MCP as categorically useless.
The report covers an escalating feud between Microsoft and a researcher who has released multiple Windows zero-days. The immediate risk is another public exploit dump if the dispute continues.
The article describes a browser side channel that can infer information from storage-device activity. The signal matters because it expands fingerprinting and privacy risk beyond traditional cookies or network identifiers.
Secluso is a private Raspberry Pi home security camera system with encrypted remote access and a short setup path. Its angle is local ownership and privacy instead of cloud-first surveillance storage.
Zot is a small terminal coding agent shipped as a static Go binary. It intentionally avoids a large plugin ecosystem, making it closer to a compact agent harness than a full development platform.
The site collects and classifies security envelope patterns as a visual taxonomy. It is more of a design and archival reference than a conventional security tool.
The article reports that jqwik received hidden instructions intended to sabotage AI coding agents by deleting application output. The incident is a concrete supply-chain example of prompt-injection risk inside developer dependencies.
The essay argues that LLMs lower the cost of generating text but can add operational overhead through review, coordination, and reliability work. Its point is that cheaper language does not automatically mean cheaper execution.
The linked issue debates removing AI-generated commits from rsync because of quality and safety concerns. It is a governance signal about how mature infrastructure projects may handle machine-generated patches.
2026-W23 · 2026-05-26 到 2026-06-01 · 采样窗口：2026-05-26..2026-06-01。滚动过去七天排名。
开源基础设施：把代码库转换成可探索、可搜索、可提问的交互式知识图谱，支持 Claude Code、Codex、Cursor、Copilot、Gemini CLI 等工具。
AI 代理：基于 AI 大模型的一键短视频生成工具。
AI 代理：面向 Claude Code、Codex、Gemini、Cursor、OpenCode、Kiro、Hermes Agent 等工具的本地代码知识图谱，目标是减少 token 和工具调用。
开源基础设施：从零学习、构建并交付 AI 工程项目的实践型资源。
开源基础设施：用于将文件和 Office 文档转换为 Markdown 的 Python 工具。
AI 代理：面向 Claude Code、Codex、OpenCode、OpenClaw、Gemini CLI 和 Hermes Agent 的跨平台桌面助手。
开源基础设施：面向知识工作者的 Claude Cowork 插件开源仓库。
AI 代理：面向 AI 代理的结构化网络安全技能库，覆盖 MITRE ATT&CK、NIST CSF、MITRE ATLAS、D3FEND、NIST AI RMF 等框架。
AI 代理：Anthropic Agent Skills 的公开仓库。
开源基础设施：面向 Claude Code 的学术研究技能集，覆盖研究、写作、审阅、修订和定稿流程。
GitHub 封禁了一名公开 Windows 0-day 的安全研究员，事件源于其与 Microsoft 的漏洞披露争议。核心风险是平台执法、漏洞披露边界和后续 exploit dump 继续升级。
文章认为 MCP 会占用过多上下文、可靠性偏低，并且与既有 CLI/API 路径重叠。它是基于生产实验的工程批评，不是简单宣判 MCP 完全无用。
报道跟踪 Microsoft 与一名 Windows 漏洞研究员之间升级的争端；该研究员此前已公开多个 0-day。短期风险是争议继续恶化并引发新的公开 exploit dump。
文章描述了一种通过存储设备活动推断访客行为的浏览器侧信道。它把隐私风险从传统 cookie、网络标识扩展到了硬件活动信号。
Secluso 是面向 Raspberry Pi 的私有家庭安防摄像系统，支持加密远程访问和较短安装流程。它的重点是本地所有权和隐私，而不是云端优先的视频存储。
Zot 是一个小型终端编码代理，以静态 Go 二进制发布。它刻意避开大型插件生态，更接近轻量 agent harness，而不是完整开发平台。
该站点收集并分类安全信封图案，形成视觉 taxonomy。它更像设计/档案参考，而不是常规安全工具。
文章称 jqwik 中出现了面向 AI 编码代理的隐藏指令，意图诱导其删除应用输出。这是开发依赖中 prompt injection / 供应链风险的具体案例。
文章认为 LLM 降低了生成文本的成本，但会通过审查、协调和可靠性工作增加运营负担。重点是语言更便宜，不等于执行一定更便宜。
该 issue 讨论是否应从 rsync 中移除 AI 生成提交，理由是质量和安全风险。它反映了成熟基础设施项目如何治理机器生成补丁的信号。